Manage authentication

Location: Administration > Users > Authentication > Manage authentication

Manage authentication menu

Once the site administrator has mapped out Authentication methods, then the next step will be to manage the active authenticitation plugins and set some common settings.

Default Plugins

One of the first things you need to consider when setting up your Moodle site is user authentication i.e. enabling people to login to your Moodle site.

Authentication methods (also known as authentication plugins) include:

• Manual accounts
• No login There is no editing on this setting via the "Manage authentication" page (see user profile)
• Email-based self-registration
• CAS server (SSO)
• External database
• FirstClass server
• IMAP server
• LDAP server
• Moodle Network authentication
• NNTP server
• No authentication
• PAM (Pluggable Authentication Modules)
• POP3 server
• RADIUS server
• Shibboleth
• NTLM/Integrated Authentication (3rd party plugin)

Common Settings

Self registration

registerauth Default: Email-based self-registration Choose which auth plugin will handle user self-registration.

Guest login

buttonguestloginbutton Default: Show You can hide or show the guest login button on the login page.

Alternate Login URL

alternateloginurl Default: Empty

If you enter a URL here, it will be used as the login page for this site. The page should contain a form which has the action property set to 'http://localhost/login/index.php' and return fields username and password. Be careful not to enter an incorrect URL as you may lock yourself out of this site. Leave this setting blank to use the default login page.

Forgotten password URL

forgottenpasswordurl Default: Empty

If you enter a URL here, it will be used as the lost password recovery page for this site. This is intended for sites where passwords are handled entirely outside of Moodle. Leave this blank to use the default password recovery.

Instructions

auth_instructions Default: Empty

Here you can provide instructions for your users, so they know which username and password they should be using. The text you enter here will appear on the login page. If you leave this blank then no instructions will be printed.

Allowed email

domainsallowemailaddresses Default: Empty

If you want to restrict all new email addresses to particular domains, then list them here separated by spaces. All other domains will be rejected. eg ourcollege.edu.au .gov.au

Denied email

domainsdenyemailaddresses Default: Empty

To deny email addresses from particular domains list them here in the same way. All other domains will be accepted. eg hotmail.com yahoo.co.uk

See also

• Multi authentication in Upgrading to Moodle 1.8
• Using Moodle: User authentication forum
• Using Moodle Do users need e-mail addresses? forum discussion
• Using Moodle Admin approving self registrations? forum discussion